Davida1992

Thanks, I'll try this. And what do people think about the transfer speed issue? Anyone else experienced any sort of capping like this?

Having a few issues so far... So on login, some devices seem to be really quick at getting OneDrive to load. Within 20 seconds or so the popup appears saying that it is "Syncing to OneDrive". Others are taking just over a minute. But it looks like on login, its opening things like Papercut (printing app), then installing MS Teams, then setting up OneDrive after that. I'm not sure why Microsoft want to have things installed on a per user basis instead of all users. Also, uploading files to onedrive seems quick enough, I can get a 1GB file up there in about 30 seconds. But when trying to download the same file back to a PC, its maxing out at a much slower speed, sitting at 3.55MB/s. Does anyone else experience this? Our limits are set much higher.

Thanks, that is fine. We have approx 8k users, and there are likely only going to be certain departments that suffer from this type of issue. I'm expecting media, art and film. I only really thought about this after finding that some of our students home areas are bigger tan 50GB which was quite a surprise. We don't limit our students storage space, we're fairly relaxed with them on that sort of thing. There is a User Voice for this though, so I did vote. Hopefully it won't stop us going ahead since there has been a fair amount of time invested in this already to make this function. https://onedrive.uservoice.com/forums/913522-onedrive-on-windows/suggestions/37569811-no-logoff-until-sync-is-complete We've also edited our account creation script so that the OneDrive storage is provisioned prior to first login to ensure that everything is going to be setup and ready for the new students due in September.

Thanks for your help so far on this. Things are looking good with the policies in place. We are ready to remove the Home Area path from students in the next few days hopefully. The migration is taking place (although, still very slow). Quick question/concern though. We have some students that work with large files and media, perhaps several gigabytes in size. Our concern is that a student will save a file locally on their machine - lets say 1GB in size. Immediately after saving, they log off, not allowing the files to sync fully to OneDrive. This is going to be a problem when they go to the next PC, their file will potentially be lost, especially since we wipe local profiles after 14 days, in some cases a student may not even notice that their files are, or have been missing. Has anyone experienced this. Or can OneDrive continue to sync after log off?

Thanks so much for your help. The Migration tool is working at the moment, but it is very slow. Doing some digging online though, it looks as if they rate limit it Microsoft's end, and I don't think we will be able to increase the speed, it'll just be a waiting game I think. I have matched the policies with a few extras so thank you for your help on that. The final link you sent for launching it via Program files seems to be dead though, do you have an alternative, I would like to read up on that. Thanks for your help so far on this.

Hi all, So a bit of background. We have several windows servers onsite running as file servers with shares for users home areas. Each user gets a drive mapped on login (H:) and inside it they can save their files so that they roam from PC to PC. We also use folder redirection to ensure downloads, documents, pictures etc is all redirected to the same H: drive. This means that if you look at the properties on the "Documents" folder for example and show the "Locations" tab, it actually shows the UNC path to the servers vs it being on the local machine. We have approx 6TB at least of student home areas in total, so we are looking to reclaim that space by having students use their OneDrive account instead. Students already have access to OneDrive and I have applied some GPOs so that known folders are automatically synchronised with OneDrive silently. I've limited bandwidth usage for sync and I've configured a few other basic policies. Unfortunately I've fallen at the first hurdle It looks like it is attempting to sync, but it just fails with "the documents folder contains other important folders and isn't supported for file backup folder redirection." After doing some digging, testing with multiple users etc, I THINK this is because we are using folder redirection which it doesn't seem to like. The easiest solution I can think of would be to turn OFF folder redirection, and set student home areas to a different drive letter such as Z: and call it "Legacy Home Area". The students can then via their old data, it'll be read only. Moving forward anything that they store anywhere else - Desktop, Documents etc will just be sync'd up to OneDrive. Sounds relatively easy, but like everything, I'm sure it won't be. That being said, what are peoples thoughts, and has anyone managed to achieve a sync via scripting or something similar? For new students starting in September, they won't even have a home area so that is a bonus, no legacy files, just OneDrive moving forward Thanks

Hey everyone, looking for a little advice on this. Best practices, recommendations, good/bad idea etc. We are a college and each of our students gets a Home area. It is a simple drive mapping to a H: drive that essentially roams with them from one PC to another. We also have folder redirection enable for Desktop, Documents etc which all redirect to the students H: drive. The storage for the H: drive comes from our Windows Server VMs that are dedicated to file sharing. The shared disk is shared at the root level in Windows and individual folders within contain the Student ID's. The H: drive is mapped at student ID level. NTFS perms are in place to prevent students accessing other students data etc. All of our students have access to OneDrive via web and we are trying to push students to use their OneDrive storage more and more. We are currently reviewing servers and storage and our end goal is essentially to OneDrive as students H: drive. As I have said, at the moment students can access OneDrive on the web, but I think long term this is ideally what will happen: 1. A student logs into a college PC 2. Their H: drive is automatically mapped (probably a powershell script or something unless there is a GPO to make all this work?). But their H: drive is their OneDrive. 3. Folder redirection - Desktop, Documents should still function as it did before. I think we are going to do this moving forward for the new intake of students in September. So all existing students will remain the same and continue to use onsite storage perhaps. So has anyone performed any similar task, any advice, guides or documents that I can follow? I haven't done much research yet, and I tend to always ask online first in order to see what others have done and maybe to get some advice and best practices etc.Thanks all

We are a college in the North West of England, with approx 300 iPads currently running on Meraki which we use for MDM. The solution for the most part is pretty robust but our Microsoft Licensing gives us access to InTune. So my task is to setup and configure InTune so that our Service Desk team can start to move our devices over from Meraki to InTune. At the moment without existing feel of iPads we provision them as managed by bringing them back to the office here, connect them to an iMac and wiping them with Apple Configurator 2 which installs our College profile onto them. When they boot up, the profile is applied, the device appears in Meraki and everything is perfect With little knowledge of InTune, I made a profile on InTune, exported the URL and added it to Apple Configurator. Initially this would work and I was getting the device registered in InTune, but being totally honest, I have had nothing but trouble with InTune. I was essentially wondering if anyone else uses InTune in a similar way to us that would be willing to knowledge share/allow us to visit on this? It would be nice to see how others have this setup in education and we can go from there. Thanks in advance

We have been using a vbs script to map printers for years on Windows 7 and it has never been an issue. The script checks the start of the computer name and if it matches it essentially maps a printer. This has never been an issue before. Since moving the majority of our computers to Windows 10 we are finding that the same script on Windows 10 is intermittently not mapping any network printers at all from the script. When this happens, a lot out and a log back in, or running the script manually does appear to fix the issue though. We thought that using the script was an old method anyway so I have recently been trying to have our printers mapped via group policy instead. We are doing this via user in the following location in group policy: User Policies > Preferences > Control Panel Settings > Printers. All of our printers are listed with the share path with item level targeting where required. The same issue appears to be occurring here too, printers are not mapping intermittently, particularly on first login. A log off and a log back in seems to fix the issue, or gpupdate /force seems to fix it too. Last time this occurred I did have a quick look on event viewer and saw the following: The user 'Student_Printing' preference item in the 'Printers Test Dash {A6956A1F-514B-4CBC-8615-A17D9419A197}' Group Policy Object did not apply because it failed with error code '0x80070057 The parameter is incorrect.' This error was suppressed. I have tried looking around for what could cause this, but everything seems a little vague. I did map the printer manually on this occasion which worked fine. I am at a but of a loss with this, because the issue is so intermittent it is actually pretty difficult to troubleshoot which does not help. Has anyone else had anything similar or can anyone suggest anything here. Any advice is much appreciated as usual Thanks.

Okay so I have provisioned an iPad using Configurator at the moment after erasing and preparing it. It starts up and tells me that it has been configured for the organisation, I ran through the initial setup, connected to WiFi etc and the iPad appears in Apple Configurator - Devices inside of inTune and the Last contacted date is recent, so it seems that intune can see the device which is good. The profile I used had User Affinity enabled. When the iPad first went to the home screen it came up the following: "App Installation: Sign in to iTunes to allow "i.manage.microsoft.com" to manage and install apps.". I signed into one of our generic accounts which resulted in the automatic installation of "Comp Portal". I assume I need to sign into this to continue digging into this. When I enter my email address on the sign in screen it should redirect to ADFS, but when redirecting it just comes up with: "Company Portal Temporarily Unavailable. - The company portal app encountered a problem. If the problem persists, please contact your system administrator." I do not appear to be able to get past this stage, am I missing something here? Our ADFS is working, we use ADFS all day long for a bunch of stuff which I have tested and it still works fine. Is there something I am missing here? Also, is it possible to get the Comp Portal app to install without having to sign into itunes ? Thanks very much

Some of our iPads were purchased from places that do not appear to be part of DEP and do not have a Reseller ID. I remember looking at this in the past and we did hit a bit of a snag. Moving forward we will probably start using DEP, but for now we still need to figure out how to best provision the iPads that we have with InTune. I will give the articles a try and let you know

Isn't DEP for newly ordered iPads though? We have 200+ existing managed iPads at the moment, so the idea is to get them all back once Intune is working, wipe and prep them with Configurator and then give them back out.

Indeed we do have Azure AD Connect, all users are already in Azure, we use single sign on services and a bunch of other stuff with Azure so that part is already good to go hopefully. I have tried a few things, we already have the MDM Push Cert setup, but beyond that I have just been playing around I guess would be the best way to describe it. I setup an Apple Configurator profile, exported it and added it to Apple Configurator, I even managed to get the device provisioned and it appeared in InTune, I could lock it and manage a few basic things, but beyond this, I couldn't assign profiles, I couldn't figure out how to push apps etc. In the end I just gave up. I was asking Microsoft about if we should be using user affinity etc, they seem to think that we would need to install the InTune app to manage the device, but we don't really want to have the user login to manage the device. The devices are college owned so we want to be able to manage it without a user logging in.... Microsoft didn't seem to give me any straight answers despite several 1 hour conference sessions with them, they kept just telling me about how great the product is, but none of that actually helped us with our requirements for our environment. When you provision an iPad using configurator on Meraki it installs the Meraki app automatically, this app seems to help manage the apps and settings, but the user does not need to login to it. Do I need to have an app with InTune, can I get that app to install on provision ? Sorry for all the questions here. It just surprises me that Microsoft actually came to us originally suggesting that we use InTune, and now that we are trying to pursue it, they seem to have no idea...

Well that fills me with confidence...

I really could do with some help setting up Microsoft InTune for MDM. It seems like a very complex product that has excellent possibilities IF we can get it working correctly. Just a little bit of background. We currently have about 200 iPads which are managed by Cisco Meraki. We are looking to move away from Meraki because InTune is included in out Microsoft Licensing. We are looking to make InTune work in a similar way to how Meraki is working. Below is what we currently do with Meraki to provision and manage an iPad: Plug the device into an iMac and erase/prepare the iPad using Apple Configurator 2. The device then turns on and shows that it has been prepared for our College etc. The Meraki app downloads itself automatically and the device then shows in the Meraki management console for us to assign policies and apps. We have a certain amount of apps that push automatically such as OWA, Office products and some additional apps. These apps install automatically to the iPad based on the settings and profiles setup in Meraki. Staff are then able to sign into the App store to install their own additional apps if they wish. We use policies in Meraki to lock the iPads down a little, for example a set desktop background, prevent the use of some apps, prevent changing the name or resetting the device etc. All devices that will go into InTune are College owned, not user owned, we will not be allowing users to add their own individual devices. So we essentially want to provision an iPad, allow the device to be locked down, push apps automatically and then allow them to sign into their personal Apple account if they wish to download and install their own apps. The thing I have noticed is that Meraki appears to be very much device based licensing, we don't really lock an iPad down to a specific user, although we can do this if we have to. With InTune it looks like the licensing is user based, so it would need to be locked down to a user I guess? I hope this make sense for how we want InTune to work, any advice or help is much appreciated. I have had a chat with a Microsoft representative about this, but they have not been helpful, they appear to have no idea how to set the product up in the way that we want it.

Worked thanks Just removed the key, readded from a 2019 server using ADBA and it activated. Microsoft confuses me lol

I know this is an older thread, but we have Server 2016 DCs and we cannot get Windows 10 LTSC 2019 to activate at all!! Is the solution to install this role on a Server 2019 box then? What a faff Microsoft Also if this is the case, can anyone confirm that having ADBA running on 2 servers will not break things? We activate office etc and stuff too via the existing 2016 box. Thanks

I know this is an older post, but I've spent several hours now after pushing out 1809 and wondering why the login background isn't our corporate background. I was cursing Microsoft thinking that it was an 1809 bug because it was working in our 1803 build and nothing much has changed... After reading these comments though, I checked the Windows version and realised I have based my image off Windows 10 Pro and not Education... I have no idea how I managed to install Pro... Kicking myself now haha :') Changed to Education and all is working now!!

We currently use Sophos, but we use a lot of the features such as application control etc. We don't have any plans to stop using Sophos in the near future, I don't think we would want to atm

I received an email recently stating that Office 2019 is now available to our organisation on our Volume Licensing programme. Wanting to try this out I logged in and downloaded the 2019 package. When installing from the ISO it gave me a few errors stating that IIS needed to be installed, I was confused but installed the role anyway on my PC and went through the install again. After installation I noticed that it has actually installed something called "Microsoft Office Online Server". After reading online this seems to be essentially a web based version of the office package... Is this correct? Is this what Office 2019 is now? Or am I doing something wrong here. We currently have Office 2016 pushed to all users at the moment, and I was under the impression that 2019 would potentially be the last physical version of office, but now I'm not too sure if I am just being stupid or if it is all web based now? Help and comments appreciated Thanks

I am sure we tried this in the past but could never get it working. We have multiple shares with staff/student home areas, so is there anyway to specify this? For example %homearea%\Chrome? I tried something similar to the above, I cannot remember the exact syntax but it didnt seem to work

Hi all, I hope I am posting this in the correct place.. We are currently prepping for Windows 10 and we are nearly ready to start deploying to our first bunch of staff. We have previously had complaints that Google chrome does not roam with the users from PC to PC. It seems to store all data in AppData/Local. I have read multiple things online, but nothing much seems to make any read sense and I am having issues getting it to roam correctly. Has anyone managed to successfully achieve roaming data with Google Chrome? Bookmarks are the most important as we already lock down addons, home pages etc etc. We are using folder redirection if that helps with anything. Thanks

Sorry to revive an old post, I am struggling to get this working, I am trying to do this using the user based policies, set the roaming profile directory to: ${documents}\Chrome Enable the creation of roaming copies for Google Chrome profile data has been enabled too.... We have folder redirection turned on, I am not sure if this would cause an issue, but the Chrome folder does not ever appear in the documents folder for us... Does anything need doing at computer level too. Thanks.

PeterH - quick question, I am looking into this at the moment... have you installed the UEV agent/client onto your machines? I thought the functionality was included in windows 10, but I am looking around and most people still seem to be installing the agent.... Can you make this work without in Win10, or is the agent still required? Thanks

I'll give it a try and see how we get on. The issue with our staff (admin/support and teaching) is that they move from PC to PC quite often. We have set GPO's so that local profiles are only removed after 30 days of non-use, so once they have setup on all the PCs they will be using, it should be OK, but I am sure it is going to cause a few issues for our Service Desk.... We can see how it goes though, thanks again for your input and help